$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa File: d77f1a9d-1504-37be-979a-7b6e3ced878c.roa (raw, json) Hash identifier: Fm634/aCaUu/TpGpF2YSwLndSbIE2l7dAUCpasKVAHg= Subject key identifier: 50:4F:B7:1F:CC:FB:4B:94:02:86:41:AE:BF:81:1A:EF:C7:1C:4E:2B Certificate issuer: /CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Certificate serial: 010D0C9F4328584A82AB4C4CD8826073888B3B00 Authority key identifier: 22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 18612 IP address blocks: 204.14.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4c:4c:d8:82:60:73:88:8b:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=3f00e3c2-d8bb-4c33-8664-d9ad105005dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8a:87:0c:55:d0:69:1e:52:fc:9a:1d:d1:ca: 62:25:28:1a:f2:2e:e1:65:2c:98:80:72:fb:a5:89: 48:81:09:a3:fe:16:19:1d:dc:36:df:cc:81:cc:51: 7b:85:49:2a:93:aa:75:53:11:5a:36:bd:ca:af:45: 70:8a:83:94:33:92:1c:73:0a:78:13:d6:61:28:5b: 51:05:f8:5c:2c:70:cc:cf:9d:e2:6f:93:96:87:37: 11:61:86:03:55:91:23:1c:cb:90:2f:18:32:58:40: 11:6d:ff:a6:a1:bb:3f:f0:e4:b8:36:95:8f:7e:f2: 30:39:02:e2:e2:84:30:66:75:e0:1d:a7:bd:0f:cd: 8f:96:9e:24:af:7c:f4:6e:a9:d4:51:e2:05:0b:bb: 72:8b:10:ba:ee:eb:9d:41:32:6e:34:5f:86:97:57: 3f:44:e8:09:b0:b8:cd:c0:44:2d:34:be:24:16:be: 7b:00:6a:a7:57:4e:aa:1a:56:3a:dd:08:0b:64:4d: e5:80:04:ae:e2:71:1e:2c:93:fb:1d:40:5f:7c:f1: 48:7f:04:1e:65:c3:d8:dc:fb:41:34:eb:8a:ca:f1: ce:96:5e:06:5c:3d:a8:89:fe:ec:9b:c1:d8:e1:47: 15:fc:e8:57:0a:3d:94:ab:fb:27:80:f9:b8:b9:0b: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4F:B7:1F:CC:FB:4B:94:02:86:41:AE:BF:81:1A:EF:C7:1C:4E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl X509v3 Authority Key Identifier: keyid:22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer sbgp-ipAddrBlock: critical IPv4: 204.14.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2e:12:9d:83:16:29:41:a3:a6:a1:40:c5:ca:10:dc:9d:23: 00:ea:7c:a0:e0:40:14:2e:0b:8c:02:8c:50:a2:40:63:e8:ab: 00:8b:93:e8:36:53:bd:cd:48:67:d2:fd:fe:9c:a2:91:b5:cd: cd:09:6b:6c:03:55:45:02:78:d8:82:a3:de:0c:10:8a:b5:32: e8:a3:2c:f6:22:94:89:8d:de:51:0e:69:23:e9:96:a8:f5:05: 26:e5:5b:e7:fc:9b:98:b8:6c:7f:bd:18:86:8a:28:bb:9e:6b: cc:cd:9c:b5:33:9c:b7:39:1d:0b:78:b6:e2:a8:eb:f8:1b:90: 92:0d:5b:91:b2:10:f2:83:80:8b:df:c9:17:6a:3f:f6:e1:ad: 54:14:38:06:84:6e:f9:db:0b:2f:5d:84:ab:25:c9:00:12:92: bd:1b:1b:1d:3a:ca:54:75:b6:ba:45:18:b6:f7:ce:37:93:e0: 80:f1:2f:5e:d8:7d:de:d8:ec:88:b5:00:5a:03:27:7d:c3:2f: db:c7:fa:1f:75:53:36:bf:99:00:9f:b9:60:01:c1:8b:07:d2: 58:5f:7c:9b:39:34:c9:02:5c:de:c6:03:c3:55:be:37:22:61: 97:5d:56:89:43:7b:e8:7f:79:a7:76:09:a3:11:fd:20:51:43: b1:8f:c6:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0xM2IJgc4iLOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFkMDhlNWMtNzllNC00Njk3LWEwMmUtZjM3ZWEyZGIy ODljMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk M2YwMGUzYzItZDhiYi00YzMzLTg2NjQtZDlhZDEwNTAwNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4qHDFXQaR5S/Jod0cpiJSga8i7hZSyYgHL7 pYlIgQmj/hYZHdw238yBzFF7hUkqk6p1UxFaNr3Kr0VwioOUM5Iccwp4E9ZhKFtR BfhcLHDMz53ib5OWhzcRYYYDVZEjHMuQLxgyWEARbf+mobs/8OS4NpWPfvIwOQLi 4oQwZnXgHae9D82Plp4kr3z0bqnUUeIFC7tyixC67uudQTJuNF+Gl1c/ROgJsLjN wEQtNL4kFr57AGqnV06qGlY63QgLZE3lgASu4nEeLJP7HUBffPFIfwQeZcPY3PtB NOuKyvHOll4GXD2oif7sm8HY4UcV/OhXCj2Uq/sngPm4uQsIKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBPtx/M+0uUAoZBrr+BGu/HHE4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWQw OGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdlYTJkYjI4OWMvZDc3ZjFhOWQtMTUwNC0z N2JlLTk3OWEtN2I2ZTNjZWQ4NzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFkMDhlNWMtNzllNC00Njk3LWEw MmUtZjM3ZWEyZGIyODljLzYxZDA4ZTVjLTc5ZTQtNDY5Ny1hMDJlLWYzN2VhMmRi Mjg5Yy5jcmwwHwYDVR0jBBgwFoAUIl1mkAJyYRWljfPscpZzsqSMpdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWQwOGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdl YTJkYjI4OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsuEp2DFilBo6ahQMXKENydIwDqfKDgQBQuC4wCjFCiQGPoqwCLk+g2 U73NSGfS/f6copG1zc0Ja2wDVUUCeNiCo94MEIq1MuijLPYilImN3lEOaSPplqj1 BSblW+f8m5i4bH+9GIaKKLuea8zNnLUznLc5HQt4tuKo6/gbkJINW5GyEPKDgIvf yRdqP/bhrVQUOAaEbvnbCy9dhKslyQASkr0bGx06ylR1trpFGLb3zjeT4IDxL17Y fd7Y7Ii1AFoDJ33DL9vH+h91Uza/mQCfuWABwYsH0lhffJs5NMkCXN7GA8NVvjci YZddVolDe+h/ead2CaMR/SBRQ7GPxnM= -----END CERTIFICATE-----Generated at Mon Aug 4 15:04:49 2025 by rpki-client